DDos/F5 issue
By Steve on Sunday, 28 September 2014
Posted in General Issues
Replies 6
Likes 0
Views 737
Votes 0
Hello everybody.

As I'm hosting ES on my own private server, i wanted to share my experience with CPU and RAM usage on page refresh.
Okay, try to test yourself if this issue affects You. Go to the ES dashboard and just hold F5 on your keyboard, at the same time look at Your system performance. I have 2x Intel xeon quad core proccessors and all eight cores are hitting 100% CPU at the same time RAM fills up with MAX usage and the system just not responding to anything until I restart it. I have fixed this issue using iptables on linux, but it also can be fixed with some apache mods.

I'm not sure why this is happening, its configuration related or main code of ES, because other sites i have on my server doesn't have this problem.
Hello Steve,

Are you on the latest version of EasySocial? We have optimized the stream quite a bit on the latest version. However, the stream itself still does take a bit of CPU because we are dealing with really large datasets
Mark
·
Sunday, 28 September 2014 22:47
·
0 Likes
·
0 Votes
·
0 Comments
·
Yes, version 1.3.6. I have fixed this issue with iptables allowing user per IP refresh content no more than 3 times in 1sec, all other requests are denied.
Steve
·
Sunday, 28 September 2014 22:54
·
0 Likes
·
0 Votes
·
0 Comments
·
Thanks for the heads up on this.
Mark
·
Sunday, 28 September 2014 23:40
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Steve,

Thanks for sharing your experience. Can you share your IP Tables command to fix this issue?

Mark, I think this is a logical security issue, will it be possible for ES to check for screen refresh rate?

Jackson
LAC Webadmin
·
Monday, 29 September 2014 03:26
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi LAC Infosys
Yes ofcourse, here You go.

-A INPUT -p tcp -m state --state NEW -m recent --set --name DDOS --rsource
-A INPUT -p tcp -m state --state NEW -m recent --update --seconds 1 --hitcount 3 --name DDOS --rsource -j DROP

I don't think so if it's possible to check any refresh rates with php, it just deppends how good is the mysql queries coded.
All hosting companies usually have this iptable setting set on their servers.
Steve
·
Monday, 29 September 2014 03:41
·
0 Likes
·
0 Votes
·
0 Comments
·
Thanks for sharing Steve
Mark
·
Monday, 29 September 2014 18:21
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post